Hack a website using SQL Injection - step by step guide

Hack a website using SQL Injection - step by step guide - Printable Version

+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Tutorials (https://sinister.li/Forum-Tutorials)
+--- Thread: Hack a website using SQL Injection - step by step guide (/Thread-Hack-a-website-using-SQL-Injection-step-by-step-guide)

Pages: 1 2

RE: Hack a website using SQL Injection - step by step guide - RogueCoder - 03-02-2014

(02-21-2014, 06:24 PM)Ligeti Wrote: Thank you for sharing, it was interesting (and easy) to read

Question:

Why do you people - and I mean everyone who writes about SQLi - target the URL only (using the get method)? I don't remember seeing anything about the post method (using forms for example), am I right or did I miss something?

Thanks

The answer to that question is probably simplicity. But I do understand why you maybe are a little frustrated about that Smile

But the thing is that, what you do in the GET request you do in the POST request as well. So it's identical approach except that you write the queries in the form field instead. In the end sql injection is the same no matter where you use it.

I hope that maybe answered your question Smile

@Ex094

RE: Hack a website using SQL Injection - step by step guide - Ligeti - 03-02-2014

I asked because I learned SQLi using forms mainly, and tje tools I use to pentest also use only a form (sql inject me plugin)... I can't say that the methods are the same ... But you are the expert :-)

Thanks.

RE: Hack a website using SQL Injection - step by step guide - Ligeti - 03-04-2014

@fahadhassen, don't say that out loud! Not good for you reputation...

RE: Hack a website using SQL Injection - step by step guide - chmod - 03-04-2014

(03-04-2014, 07:26 AM)fahadhassen Wrote: -snip-

hackcommunity.com/rules.php Wrote:20. Illegal Content is not allowed. We remove it as quickly as possible however we will not be held liable for any such content.

This includes hacking requests, just as a court of law we don't care what your reasons are a crime is a crime, we will not help you commit it.

RE: Hack a website using SQL Injection - step by step guide - ASDASOD - 03-05-2014

i got one site has this error
"Wrong QueryYou have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ''69''' at line 1"

But when trying to use order by method no error appeared??
I used order by 1 to 1000
and order by 1-- to 1000--
Have you any solution???

RE: Hack a website using SQL Injection - step by step guide - 756dk - 03-05-2014

This post is the reason why i like Spartans.

Very well explained. Smile

RE: Hack a website using SQL Injection - step by step guide - hhrk - 04-21-2014

Try Sqligods.com